Full or incremental pattern file updates on BlueCoatAV causes frequent reboots without any specific evidence when Kaspersky engine is set


<< Back to Knowledge Search

Solution

Overview

Normally, If BlueCoatAV has reboot issue, ".send" (AV context) file is created under BlueCoatAV Web Management Console -> Advanced -> Troubleshooting -> Log files

So BlueCoat support can find the reason for the restart by analyzing this file.

However, if Kaspersky Antivirus engine is set on BlueCoatAV, BlueCoatAV might have frequent restarts without any specific evidence.

You can check boot.log file whether BlueCoatAV is restarted.

 

=====================================

 boot.log : BlueCoatAV Web Management Console -> Log files -> Log files

=====================================

  2010-05-24 06:59:24+00:00UTC Currently booted from 1

  2010-06-01 07:33:14+00:00UTC Currently booted from 1

  2010-06-01 07:45:13+00:00UTC Currently booted from 1

  2010-06-02 04:26:02+00:00UTC Currently booted from 1

  2010-06-03 06:51:05+00:00UTC Currently booted from 1

  2010-06-04 01:02:57+00:00UTC Currently booted from 1

  2010-06-07 03:49:27+00:00UTC Currently booted from 1

  2010-06-08 09:01:14+00:00UTC Currently booted from 1

  2010-06-08 09:59:27+00:00UTC Currently booted from 1

  2010-06-08 14:49:58+00:00UTC Currently booted from 2

  2010-06-08 12:05:32+00:00UTC Currently booted from 2

  2010-06-08 15:40:49+00:00UTC Currently booted from 2

  2010-06-08 18:12:51+00:00UTC Currently booted from 3

  2010-06-08 18:20:16+00:00UTC Currently booted from 1

  2010-06-08 18:24:32+00:00UTC Currently booted from 1

  2010-06-08 19:03:17+00:00UTC Currently booted from 3

  2010-06-08 19:29:44+00:00UTC Currently booted from 3

  2010-06-08 19:35:03+00:00UTC Currently booted from 3

  2010-06-08 19:41:16+00:00UTC Currently booted from 3

  2010-06-08 19:47:34+00:00UTC Currently booted from 3

  2010-06-08 19:55:10+00:00UTC Currently booted from 3

Cause
Resolution

This problem is fixed in ProxyAV 3.2.5.4 PR build(46289)

  Bug#140514 - AV810 with Kaspersky crash without .send a lot

 

When ProxyAV 3.2.5.4 PR build is loaded on BlueCoatAV and Kaspersky Antivirus engine is set, please enable both of following options

  BlueCoatAV Web Management Console -> Advanced -> troubleshooting

   - Enable additional Kaspersky diagnostic logging

   - Enable watchdog timer changes

Workaround
Additional Information
Bug Number
InQuira Doc IdKB3895
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Software      ProxyAV 3
Topic      Crash / Restart
Article Number      000009579
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat